655811 - Copy review of Secure Passwords Safety leaflet

Status: RESOLVED WORKSFORME

(Marketing :: Copy, task)

Description

[Jane Finette]

Attachment: Passwords brochure original

I'm looking for a copy review of the Secure Password leaflet Richard Milewski created earlier this year. 

Matej - where possible I'm looking for the language to be as consumer friendly as possible and as succinct as possible. Happy for you to change the examples if you wish. I'd like us to refresh the copy as it stands in this leaflet and then create a web page based on this content - so it might need a different format (I'll be filing a new bug for that).

Comment 1

[Jane Finette]

A bug has been filed to review the design at bug 655813

Timing: Looking for a May 23 delivery if possible please.

Comment 2

[Matej Novak [:matej]]

Attachment: Revised passwords brochure copy

Made some edits, reworked a few things (especially the opening), added some bits and moved a few things around. Have a look and let me know what you think.

Comment 3

[Jane Finette]

Matej -- all looks great and thank you for being so fast. John, not sure if you need to look - but I'm very happy with the result. I'll go ahead and add to Lee's design bug if you're fine John? 

thanks again Matej.

Comment 4

[John Slater]

I'll probably have to view it in the layout to make a final call, as the way the text is positioned will make a big difference. For example, in the doc the narrative feels a little off...it spends a lot of time talking about what not to do and not much time talking about what to do. Feels like we should get to the 'to do' part sooner, but that could be solved in layout.

Also, two other nits:
- is it really true that people enter in passwords dozens of times each day? That seems a bit hyperbolic to me.
- the ending is a bit too glib for my taste.

Anyway, I do think this is good stuff overall and is fine to pass along to design, but I could see us needing to do one more pass once it's laid out. (And we should discuss all this with Lee before he gets started.)

Comment 5

[Matej Novak [:matej]]

(In reply to comment #4)
> Also, two other nits:
> - is it really true that people enter in passwords dozens of times each day?
> That seems a bit hyperbolic to me.

I wondered about that as well, but then I thought, whether or not you physically enter passwords that often, you are asked for them at every turn (think about how many times the average person checks Facebook or Gmail every day). Happy to change it, though.

Shall we revisit that along with everything else in layout?

Comment 6

[John Slater]

That's a good point. Let's just revisit all of it in layout.

Thanks!

Comment 7

[Jane Finette]

Okay - thanks Guys. Good plan and comments. Lets leave until its in situ. I'll share on the other bug.

Comment 8

[Matej Novak [:matej]]

A couple more thoughts here.

I had an idea how to change the ending:

That’s it. Now you’re ready to be a password ninja: safer, more secure and more confident. And remember, PasswordNinja makes a fine username, but not a good password.

Also, Chelsea has been working on some safer password stuff as part of a consumer education book sprint, that Jane knows about, and one of the things she wrote was a little quiz testing people's knowledge of what makes a good password. I've copied her on the bug and I wonder if we'd want to consider adding that kind of thing to the site. It might be a good way to introduce the "what not to do" stuff, give people a 3 or 4 question quiz before getting into the rest. Thoughts?

Comment 9

[Lee Tom]

Thanks for attaching the copy and original brochure. Just to be clear, do we want to stick with the same format? Looks like A4 size, folded into thirds. 

John, as far as general visual style, I should start from Mozilla.com blue (similar to the All-hands badge?)

Comment 10

[John Slater]

+1 for the new ending in comment #8. I like the quiz idea, too, if there's room for it.

Lee, I believe we do want to stick with the same format. As far as visual style goes, you're basically creating a new template there. I think starting with the mozilla.com design elements and extending them to print is the right approach (like with the all-hands badge, yes).

Comment 11

[Chelsea Novak [:chelsea]]

Hey all, 

This is the quiz content we developed during the sprint. Please note, it's sprint copy and not polished. You're welcome to take any of it if it's useful in some way. It was written to become something like a Facebook quiz. 

Cheers, 
C

************
Think you're web savvy? Want to see if you're being safe online. Take this quiz and if you pass, you can get a badge for your Facebook profile

Question 1

Let's start simple. When creating a password, what should it be?

A. A pet's name
B. Your birthdate
C. The word password
D. Something only you can remember

Answer D
You see it happen in the movies all the time. Someone's system gets hacked because they've used an obvious password. While it's unlikely that we have state secrets stored on our computers, our personal information is just as important. When choosing a password, the less obvious the better. 

Question 2

Security experts say that passwords are stronger when you use special characters. What's an example of a special character?

A. Clip art
B. Numbers and/or punctuation
C. Backwards letters
D. Your uncle Horace

Answer B
Using simple tricks like replacing letters with numbers, adding punctuation and capitalization can make your password much stronger and safer. 

Question 3 

Sometimes size does matter. What's the minimum length for a password to be considered safe?

A. 26 characters 
B. 4 characters
C. 15 characters
D. 8 characters

Answer D
The more characters you use, the safer your password will be. 4 character passwords are increasingly easy to hack. In fact an 8 character password (using only letters, numbers and punctation) is more than 5 million times safer than a 4 character password. Add on as many characters as you can manage and you'll be safer for it. 

Question 4 

Remembering one password is hard. Remembering 10 is even harder. How many places can you reuse a password before it's dangerous?

A. None. Passwords can only be used once.
B. Two. If the sites are unrelated, then you'll be fine if just one of them gets hacked
C. Ten. 
D. Everywhere. 

Answer A
If one place where you use a password is compromised, then they all are. Hackers can test thousands of sites with your login and password to see if your password works. Be smart and keep your passwords diverse. 

Question 5 

No doubt about it, keeping tabs on your passwords can be tedious work. What are some good reasons for being lazy with passwords?

A. I can only remember so many things. 
B. Why would anyone target me?
C. I'm too busy to update all my passwords.
D. None of the above.

Answer D
While all of the above are fair excuses, should your account get hacked you will regret not have taken the steps to make your passwords safe. Most web browsers offer password remembering programs to help you manage your passwords and update them when you change them. 

Using a mnemonic that relates to the site that you're creating a password for is also a great way to keep your passwords diverse and help you remember them. Just remember to use special characters as well. 

If you need more help with remembering and have to write your passwords down, be sure to store them in a personal safe and somewhere far away from your computer.

Comment 12

[Matej Novak [:matej]]

I don't remember the status of this, but seeing as the last comment is two years old, I feel like we can close it out.